• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2006, Vol. 28 ›› Issue (10): 107-110.

• 论文 • 上一篇    下一篇

一种基于中间件的授权管理体系结构

尹刚 王怀民   

  • 出版日期:2006-10-01 发布日期:2010-05-20

  • Online:2006-10-01 Published:2010-05-20

摘要:

近年来,授权策略的研究取得诸多进展。但是,在应用系统中实施这些策略还需大量具有共性和挑战性的工作。本文将对象中间件技术同信任管理技术有机地结合起来,定义了面向中间件的授权策略框架MPF,然后提出一种通用中间件授权管理体系结构StarNumen。StarNumen将授权同应用组件分离,以策略驱动或透明的方式为应用系统提供授权策略描述、策略存储、会话管理等多种具有通用性的授权机制。模拟测试结果说明了StarNumen的可行性和有效性。

关键词: 授权 信任管理 应用集成

Abstract:

Much authorization policies have been proposed in recent years, tion systems, there is still a lot of common but challenging work. This paper combines the technology of object-based middleware and trust management technologies, and defines an authorization policy framework for middleware Then a generalized middleware-based authorization management architecture named StarNumen is proposed, which separates authorization from application components, and provides application systems with general authorization mechanisms in a policy-driven or transparent way, such as policy description, policy storage, s ession management, etc. Simulation results show that our approach is feasible and effective.

Key words: (authorization, trust management, application integration)